Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
Lalitkumar
Explorer

Not able to find any logs for IPv6

Dear Team,

 

Thanks in advance for the help.

 

I have an issue with IPv6 logs my management server (R 81). i am not able to find any logs for the IPv6 Network. I am using both IPv4 & IPv6 simultaneously. I can see logs for the IPv4 network successfully , not for the IPv6 Network.

 

Kindly , Please help me to resolve for getting logs of IPv6 Network..

0 Kudos
12 Replies
Chris_Atkinson
Employee Employee
Employee

The security gateway is configured for IPv6?

What search syntax/filters are you using with Smartlog?

CCSM R77/R80/ELITE
0 Kudos
Lalitkumar
Explorer

Hi Chris ,

Thanks for your kind prompt..

The security gateway is configured for IPv6 enabled.

i am using syntax Src:2002::0. if i am wrong , Please correct me the right syntax/filters

0 Kudos
Lalitkumar
Explorer

all hits are countable on IPv6 policy for specific users with Source & Destination address. I can see log on TCPDUMP as well.

 

 

0 Kudos
Chris_Atkinson
Employee Employee
Employee

Do you see corresponding logs if searching by rule or other criteria?

Sounds like a indexing issue of sorts, please contact TAC.

CCSM R77/R80/ELITE
0 Kudos
Lalitkumar
Explorer

Hi Chris,

Thanks for helping me..

 

I can see the hit count on policy in management server, But for better log inspection i am using SmartView Tracker (R77.30). I am not able to figure out complete log in it. 

In my scenario, using Primary MDS/MLM & Secondary MDS/MLM which contains approx 47 CMA & its corresponding Security Gateway.

On login SMS for CMA corresponding security Gateway. i am not able to see any logs for IPv6 Network (Source & Destination address).

If possible, Please help to me write proper filter for finding & inspecting the ipv6 logs in SmartView Tracker (R77.30).

My main aim is to see logs in SmartView Tracker (R77.30).

Thanks for your kind help for the same in advance.

0 Kudos
Chris_Atkinson
Employee Employee
Employee

Sorry is the management R81 as your first post states or no?

R77.30 has been out of support since September 2019.

Would recommend engaging further with your local account team in this case.

CCSM R77/R80/ELITE
0 Kudos
Lalitkumar
Explorer

Yes, management is running on R81. But for better log inspection i am using SmartView Tracker (R77.30).

0 Kudos
Chris_Atkinson
Employee Employee
Employee

This doesn't make sense nor compatable, if you need the old style tracker it can be found in the R81 SmartConsole program install folder e.g. C:\Program Files (x86)\CheckPoint\SmartConsole\R81\PROGRAM\CPlgv.exe

But you first should confirm if IPv6 logs can be seen in SmartLog such is the current standard / best practice.

My suspicion as I said earlier is an indexing issue that you should discuss with Support (TAC).

CCSM R77/R80/ELITE
0 Kudos
Lalitkumar
Explorer

Thanks for your kind response to my query,

I will go ahead with with Support (TAC) as per your last post..

Again, Thank you.

0 Kudos
PhoneBoy
Admin
Admin

The legacy SmartView Tracker does not show IPv6 logs.
This is a known, documented limitation.
See: [redacted broken link]

You need to use SmartView if you want to see these logs.

Lalitkumar
Explorer

Thanks for your kind help to me.

But I am not able to open this above link for IPv6 documented limitation. Will you please share the pdf doc for the same to me.

0 Kudos
Chris_Atkinson
Employee Employee
Employee

Please see -

Limitation: SmartView Tracker is not able to filter the logs by IPv6 address in Source / Destination columns. For such filtering, use SmartLog .

Source: SmartView Tracker does not display logs for IPv6 traffic (checkpoint.com)

CCSM R77/R80/ELITE
0 Kudos

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.

Upcoming Events

    CheckMates Events